cavisson systems
1
• Random String Parameter is used to generate a
random string of characters whose length is also
random but lies within a specified range.
• The character set ,with which the random string will
be formed, should be mentioned first.
cavisson systems
2
Random String Parameter window
cavisson systems
3
1.Parameter Name
 ‘Parameter name’ is a ‘random string parameter
Variable Name’ which is used to access this parameter
in the entire script.
 Variable name consists of only English alphabet and _
(it also accepts alpha-numeric name).
cavisson systems
4
2.Character Set
 This field is used to define the character set from
which NetStorm will generate random String.
 Character set can be ‘a-z’ ‘A-Z’ and ‘0-9’ and their subsets.
 You can use their combination e.g. b-e1-3
In this case the string generated will be from b, c, d, e,
1, 2, 3 characters only.
 Multiple character set should be defined like this
a-z0-9A-Z (without any gap or comma)
cavisson systems
5
3.Minimum
 Here you can specify minimum length of the string.
 It can range from 0-10,000.
cavisson systems
6
4.Maximum
 Here you can specify maximum length of the string.
 It can range from 0-1,000,000
cavisson systems
7
5.Update Value On
 This field is used to tell Netstorm when to
generate new string:
It has two options:1. Session
2. use
contt..
cavisson systems
8
 Session::
Means generate string once and use this value for the
entire session
i.e. If ‘session’ is chosen, random string is generated only
for first use of Random string Parameter. Then for the
entire script, same value is used.
 Use::
Means generate string every time Random String
Parameter is used.
i.e. If ‘Use’ is chosen, random string is generated for each
use of Random String Parameter. For example::If Random
String Parameter is used 50 times in script, then in case of
‘use’, for every reference, new random string is generated.
cavisson systems
9
Example::
 In this example, we will use Tours script and generate
Random String for Street Address used in
Confirmation Page.
cavisson systems
10
1. Open registration.spec file and right-click in right
pane. Choose Parameters > Random String
Parameters.
cavisson systems
11
2. Click ADD button
cavisson systems
12
3.
Set following values
cavisson systems
13
4.Click on OK > Close. You will notice following
in registration.spec file :-
API
nsl_random_string_var(StreetAddress, Min=10,
Max=30, CharSet="A-G0-9", Refresh=SESSION);
cavisson systems
14
5. Click on Save button and open flow file (hpd.c). Here street
address will be parameterized which is on Page Confirmation.
After ParameterizationConfirmation Page looks like as shown
below: ns_web_url ("Confirmation“,"URL=http://192.168.1.39:83/cgi-
bin/findflight?firstName=Tiger&lastName=Scott&address1=
{StreetAddress}&address2=Fremont%2C+CA+94538&pass1=S
cott+Tiger&creditCard=11111111&expDate=12%2F2%2F&oldCCOpti
on=&numPassengers=1&seatType=Coach&seatPref=None&outbo
undFlight=000%7C0%7C09-172011&advanceDiscount=&.cgifields=saveCC&buyFlights.x=76&bu
yFlights.y=13",
"HEADER=Accept-Language: Z",
contt…
cavisson systems
15
INLINE_URLS,
"URL=http://192.168.1.39:83/tours/Merc10dev/images/banner_animated.gif", "HEADER=Accept-Language: Z",
END_INLINE,
"URL=http://192.168.1.39:83/tours/Merc10dev/images/sun_swede.gif", "HEADER=Accept-Language: Z",
END_INLINE,
"URL=http://192.168.1.39:83/tours/Merc10dev/images/flights.gif", "HEADER=Accept-Language: Z",
END_INLINE,
"URL=http://192.168.1.39:83/tours/Merc10-dev/images/home.gif",
"HEADER=Accept-Language: Z", END_INLINE,
"URL=http://192.168.1.39:83/tours/Merc10-dev/images/signoff.gif",
"HEADER=Accept-Language: Z", END_INLINE,
"URL=http://192.168.1.39:83/tours/images/splash_flightconfirm.gif",
"HEADER=Accept-Language: Z", END_INLINE,
"URL=http://192.168.1.39:83/tours/images/bookanother.gif",
"HEADER=Accept-Language: Z", END_INLINE,
"URL=http://192.168.1.39:83/tours/vep/images/velocigen.gif",
"HEADER=Accept-Language: Z", END_INLINE
);
cavisson systems
16
6.Click on Save button and execute scenario.
7.Now look at request with number 5. It will look something
like follows:( VALUE SUBSTITUTED BY NETSTORM IS SHOWN IN
BOLDS)
GET /cgibin/findflight?firstName=Tiger&lastName=Scott&address1
=0321E600G7.&address2=Fremont%2C+CA+94538&pass1=
Scott+Tiger&creditCard=11111111&expDate=12%2F2%2F&old
CCOption=&numPassengers=1&seatType=Coach&seatPref
=None&outboundFlight=000%7C0%7C09-172011&advanceDiscount=&.cgifields=saveCC&buyFlights.x=7
6&buyFlights.y=13 HTTP/1.1
Host: 192.168.1.39:83
User-Agent: Mozilla_CA/4.79 [en] (X11; U; Linux 2.4.183d_epoll i686)
cavisson systems
17
contt…
Accept:
text/xml,application/xml,application/xhtml+xml,text/
html;q=0.9,text/plain;q=0.8,video/xmng,image/png,image/jpeg,image/gif;q=0.2,text/css,*
/*;q=0.
Accept-Encoding: gzip, deflate, compress;q=0.9
Keep-Alive: 300
Connection: keep-alive
Accept-Language: Z
cavisson systems
18
Ex : Update Value On ‘Session’
cavisson systems
19
Parameterizing Login Page in hpd.c file
ns_web_url ("Login",
"URL=http://192.168.1.39:83/cgibin/login?userSession=75893.0884568651DQADHfAp
HDHfcDtccpfAttcf&username={username}password={
password}JSFormSubmit=off&login.x=0&login.y=0?
{session_demo}",
"HEADER=Content-Type: application/x-www-formurlencoded{session_demo}",
"HEADER=Accept-Language: Z{session_demo}",
contt..
cavisson systems
20
INLINE_URLS,
"URL=http://192.168.1.39:83/tours/Merc10dev/images/banner_animated.gif", "HEADER=Accept-Language: Z",
END_INLINE,
"URL=http://192.168.1.39:83/tours/Merc10dev/images/sun_swede.gif", "HEADER=Accept-Language: Z",
END_INLINE,
"URL=http://192.168.1.39:83/tours/Merc10-dev/images/flights.gif",
"HEADER=Accept-Language: Z", END_INLINE,
"URL=http://192.168.1.39:83/tours/Merc10-dev/images/home.gif",
"HEADER=Accept-Language: Z", END_INLINE,
"URL=http://192.168.1.39:83/tours/Merc10-dev/images/signoff.gif",
"HEADER=Accept-Language: Z", END_INLINE,
"URL=http://192.168.1.39:83/tours/images/banner_merctur.jpg",
"HEADER=Accept-Language: Z", END_INLINE,
"URL=http://192.168.1.39:83/tours/vep/images/velocigen.gif",
"HEADER=Accept-Language: Z", END_INLINE
);
cavisson systems
21
Now look at request . It will look something like follows:( VALUE
SUBSTITUTED BY NETSTORM IS SHOWN IN BOLDS)
GET /cgibin/login?userSession=75893.0884568651DQADHfApHDHfcDtc
cpfAttcf&username=password=JSFormSubmit=off&login.x=0&lo
gin.y=0?eug0W%22Uxf0w HTTP/1.1^M
Host: 192.168.1.39:83^M User-Agent: Mozilla/4.0 (compatible;
MSIE 8.0; Windows NT 6.0; WOW64; Trident/4.0; SLCC2; .NET
CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media
Center PC 6.0; InfoPath.2; .NET4.0C)^MAccept:
text/xml,application/xml,application/xhtml+xml,text/html;q=0.
9,text/plain;q=0.8,video/xmng,image/png,image/jpeg,image/gif;q=0.2,text/css,*/*;q=0.^M
Accept-Encoding: gzip, deflate, compress;q=0.9^M
Keep-Alive: 300^M
Connection: keep-alive^M
Content-Type: application/x-www-formurlencodedeug0W"Uxf0w^M
Accept-Language: ^RZeug0W"Uxf0w^M
^M
cavisson systems
22
 Random String generated is the same at all the places
as we have used “session”
cavisson systems
23
Ex:Update Values On ‘Use’
cavisson systems
24
Parameterizing Login Page in hpd.c file
ns_web_url ("Login",
"URL=http://192.168.1.39:83/cgibin/login?userSession=75893.0884568651DQADHfAp
HDHfcDtccpfAttcf&username={username}password={
password}JSFormSubmit=off&login.x=0&login.y=0?
{use_demo}",
"HEADER=Content-Type: application/x-www-formurlencoded{use_demo}",
"HEADER=Accept-Language: Z{use_demo}",
contt..
cavisson systems
25
INLINE_URLS,
"URL=http://192.168.1.39:83/tours/Merc10dev/images/banner_animated.gif", "HEADER=Accept-Language: Z",
END_INLINE,
"URL=http://192.168.1.39:83/tours/Merc10dev/images/sun_swede.gif", "HEADER=Accept-Language: Z",
END_INLINE,
"URL=http://192.168.1.39:83/tours/Merc10-dev/images/flights.gif",
"HEADER=Accept-Language: Z", END_INLINE,
"URL=http://192.168.1.39:83/tours/Merc10-dev/images/home.gif",
"HEADER=Accept-Language: Z", END_INLINE,
"URL=http://192.168.1.39:83/tours/Merc10-dev/images/signoff.gif",
"HEADER=Accept-Language: Z", END_INLINE,
"URL=http://192.168.1.39:83/tours/images/banner_merctur.jpg",
"HEADER=Accept-Language: Z", END_INLINE,
"URL=http://192.168.1.39:83/tours/vep/images/velocigen.gif",
"HEADER=Accept-Language: Z", END_INLINE
);
cavisson systems
26
Now look at request . It will look something like follows:( VALUE
SUBSTITUTED BY NETSTORM IS SHOWN IN BOLDS)
GET /cgibin/login?userSession=75893.0884568651DQADHfApHDHfcDtccpfAtt
cf&username={username}password={password}JSFormSubmit=off&log
in.x=0&login.y=0?eoLixvHIqRV0g7eAUxy HTTP/1.1^M
Host: 192.168.1.39:83^M
User-Agent: Mozilla_CA/4.79 [en] (X11; U; Linux 2.4.18-3d_epoll
i686)^MAccept:
text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/
plain;q=0.8,video/xmng,image/png,image/jpeg,image/gif;q=0.2,text/css,*/*;q=0.^M
Accept-Encoding: gzip, deflate, compress;q=0.9^M
Keep-Alive: 300^M
Connection: keep-alive^M
Content-Type: application/x-www-formurlencodedSNhNZpIonAhsPT2^M
Accept-Language: ^RZojV5aQXhxaIr^M
^M
cavisson systems
27
 Random String generated is different at all places as we
have used ‘use’.
cavisson systems
28
Ex:Specific Character Set
 Any specific character set can also be given.
 Generated string will consist of this defined character
set only.
cavisson systems
29
cavisson systems
30
 Parameterizing Login Page in hpd.c file
ns_web_url ("Login",
"URL=http://192.168.1.39:83/cgibin/login?userSession=75893.0884568651DQADHfAp
HDHfcDtccpfAttcf&username={username}password={
password}JSFormSubmit=off&login.x=0&login.y=0?{s
pecific_char_set}",
"HEADER=Content-Type: application/x-www-formurlencoded{specific_char_set}",
"HEADER=Accept-Language:
Z{specific_char_set}",
contt…
cavisson systems
31
INLINE_URLS,
"URL=http://192.168.1.39:83/tours/Merc10dev/images/banner_animated.gif", "HEADER=Accept-Language: Z",
END_INLINE,
"URL=http://192.168.1.39:83/tours/Merc10dev/images/sun_swede.gif", "HEADER=Accept-Language: Z",
END_INLINE,
"URL=http://192.168.1.39:83/tours/Merc10-dev/images/flights.gif",
"HEADER=Accept-Language: Z", END_INLINE,
"URL=http://192.168.1.39:83/tours/Merc10-dev/images/home.gif",
"HEADER=Accept-Language: Z", END_INLINE,
"URL=http://192.168.1.39:83/tours/Merc10-dev/images/signoff.gif",
"HEADER=Accept-Language: Z", END_INLINE,
"URL=http://192.168.1.39:83/tours/images/banner_merctur.jpg",
"HEADER=Accept-Language: Z", END_INLINE,
"URL=http://192.168.1.39:83/tours/vep/images/velocigen.gif",
"HEADER=Accept-Language: Z", END_INLINE
);
cavisson systems
32
Now look at request . It will look something like follows:( VALUE SUBSTITUTED BY
NETSTORM IS SHOWN IN BOLDS)
GET /cgibin/login?userSession=75893.0884568651DQADHfApHDHfcDtccpfAttcf&user
name={username}password={password}JSFormSubmit=off&login.x=0&login.y
=0?77db7dde7AbAeb00 HTTP/1.1^M
Host: 192.168.1.39:83^M User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows
NT 6.0; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR
3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.2;
.NET4.0C)^MAccept:
text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q
=0.8,video/x-mng,image/png,image/jpeg,image/gif;q=0.2,text/css,*/*;q=0.^M
Accept-Encoding: gzip, deflate, compress;q=0.9^M
Keep-Alive: 300^M
Connection: keep-alive^M
Content-Type: application/x-www-form-urlencodedA7CCbdd7b77CedbdA^M
Accept-Language: ^RZCe7Ad7bddCCCAC^M
^M
cavisson systems
33
 Its clear from request page that random string is
generated by using only defined character set i.e.
‘AbCde07’
cavisson systems
34
 Character Set can not consist of ‘Special Characters’.
cavisson systems
35
•Minimum value should be less than maximum value else
there will be an error pop-up.
cavisson systems
36
Ex::With large maximum &
minimum values
cavisson systems
37
Parameterizing Login Page in hpd.c file
ns_web_url ("Login",
"URL=http://192.168.1.39:83/cgibin/login?userSession=75893.0884568651DQADHfAp
HDHfcDtccpfAttcf&username={username}password={
password}JSFormSubmit=off&login.x=0&login.y=0?{la
gre_string_generation}",
"HEADER=Content-Type: application/x-www-formurlencoded{lagre_string_generation}",
"HEADER=Accept-Language:
Z{lagre_string_generation}“,
contt..
cavisson systems
38
INLINE_URLS,
"URL=http://192.168.1.39:83/tours/Merc10dev/images/banner_animated.gif", "HEADER=Accept-Language: Z",
END_INLINE,
"URL=http://192.168.1.39:83/tours/Merc10dev/images/sun_swede.gif", "HEADER=Accept-Language: Z",
END_INLINE,
"URL=http://192.168.1.39:83/tours/Merc10-dev/images/flights.gif",
"HEADER=Accept-Language: Z", END_INLINE,
"URL=http://192.168.1.39:83/tours/Merc10dev/images/home.gif", "HEADER=Accept-Language: Z", END_INLINE,
"URL=http://192.168.1.39:83/tours/Merc10dev/images/signoff.gif", "HEADER=Accept-Language: Z",
END_INLINE,
"URL=http://192.168.1.39:83/tours/images/banner_merctur.jpg",
"HEADER=Accept-Language: Z", END_INLINE,
"URL=http://192.168.1.39:83/tours/vep/images/velocigen.gif",
"HEADER=Accept-Language: Z", END_INLINE
);
cavisson systems
39
Now look at request . It will look something like follows:( VALUE
SUBSTITUTED BY NETSTORM IS SHOWN IN BOLDS)
GET /CGIBIN/LOGIN?USERSESSION=75893.0884568651DQADHFAPHDHFCD
TCCPFATTCF&USERNAME={USERNAME}PASSWORD={PASSWORD}JSFOR
MSUBMIT=OFF&LOGIN.X=0&LOGIN.Y=0?FV47NF2JOADOW6AB0
QYOO67CFU3ALU1RFWPS1H2FI5U52U6SBU6PR4RWOLX05
PHABXT24L8DHS89C5RDQOT7IBUWMHMHWUIXH1QCD
OGK6EK992DPGWNOX7BAENH18QPGH5JLJPWGT6
HTTP/1.1^MHOST: 192.168.1.39:83^M
USER-AGENT: MOZILLA/4.0 (COMPATIBLE; MSIE 7.0; WINDOWS NT
5.1; WOW64; TRIDENT/4.0; SLCC2; .NET CLR 2.0.50727; .NET
CLR 3.5.30729; .NET CLR 3.0.30729; MEDIA CENTER PC 6.0;
INFOPATH.2; .NET4.0C)^M
ACCEPT:
TEXT/XML,APPLICATION/XML,APPLICATION/XHTML+XML,TEXT/HTML;
Q=0.9,TEXT/PLAIN;Q=0.8,VIDEO/XMNG,IMAGE/PNG,IMAGE/JPEG,IMAGE/GIF;Q=0.2,TEXT/CSS,*/*;Q=0.^
M
cavisson systems
40
ACCEPT-ENCODING: GZIP, DEFLATE, COMPRESS;Q=0.9^M
KEEP-ALIVE: 300^M
CONNECTION: KEEP-ALIVE^M
CONTENT-T YPE: APPLICATION/X-WWW-FORMURLENCODEDTZI955MKTJLTOZ1FXHU4PQD0ZSN6BKBV
9KU4G7FZGQJVGA03ILXY10PRJ2NKCP6C0Q76OCWU
T5GZ67SFIG3A7IRHB5RELOGB5D8JFU4YQANN^M
ACCEPT-LANGUAGE:
^RZ6SGDMGBVYIWT004E66A94JFPD45DHJBE1HIENK
ZCSLVJBQO8MO7GXDV17R4F06JSDSWR2LTLWFUYV9
W7NUEBX02VIX08T9RXSDEKPXWC2G0OGNLT8QVW
HNHPB7NV74IP8N0NAMP3TGHZUTJSA4E^M
^M
cavisson systems
41
cavisson systems
42